21. Controller to act as repository.-- (1) The Controller shall be the repository of all Digital Signature Certificates issued under this Act. (2) The Controller shall ensure that the secrecy and security of the digital signature are assured and in order to do so shall make use of hardware, software and procedures that are secure from intrusion and misuse and follow such standards as may be prescribed. 22. Licence to issue Digital Signature Certificate.-- (1) Subject to the provision of subsection (2) of this section, any person may make an application to the Controller for a licence to issue Digital Signature Certificates. (2) No licences shall be issued under sub-section (1) of this section unless the applicant fulfills such requirements with respect to qualification, expertise, manpower, financial resources and other infrastructure facilities which are necessary to issue Digital Signature Certificates. (3) A licence granted under sub-section (1) of this section— (a) shall be valid for certain period; (b) shall be delivered subject to fulfilling defined terms and conditions; and (c) shall not be transferable or heritable. 23. Application for licence.-- (1) Every application for issue of a licence shall be submitted in a prescribed form. (2) Every application of sub-section (1) of this section shall be accompanied by— (a) a certification practice statement; (b) necessary documents with respect to identification of the applicant; (c) evidence of payment of defined fees; (d) such other documents as may be prescribed. 24. Renewal of licence.—Licence issued under this Act shall be renewed automatically for a certain period subject to paying fees in a prescribed procedure. 25. Procedure for grant or rejection of licence.—The Controller may, on receipt an application under sub-section (1) of section 22 of this Act, after considering the documents accompanying the application and such other factors as he deems fit, grant the licence or reject the application: Provided that no application shall be rejected under this section unless the applicant has been given a reasonable opportunity of presenting his case. 26. Revocation and suspension of licence.—(1) The Controller may suspend or revoke any licence under this Act, if he is satisfied after making such inquiry, as he may think fit, that a Certifying Authority has— (a) made statement in, or in relation to, the application for the issue or renewal of the licence, which is incorrect or false in material particulars; (b) failed to comply with the terms and conditions subject to which the licence was granted; (c) failed to main the standards specified under section 21(2) of this Act; (d) contravened any provisions of this Act, rules, regulations or orders made thereunder. (2) No licence shall be revoked unless the Certifying Authority has been given reasonable opportunity of showing cause against the proposed revocation under sub-section (1) of this section. (3) The Controller may, if he has reasonable cause to believe that there is any ground for revoking a licence under sub-section (1) of this section, by or, suspend such licence temporarily pending the completion of any enquiry ordered by him. (4) No licence shall be suspended for a period exceeding 14 (fourteen) days unless the Certifying Authority has been given a reasonable opportunity of showing cause against the propose suspension under sub-section (3) of this section; 9